2
0
mirror of https://github.com/xcat2/confluent.git synced 2024-11-22 17:43:14 +00:00

Add HTTP/1.0 cache suppression

There is not a single client that will ever talk
to this service that would not support HTTP/1.1.
However, do this to satisfy a scanner.
This commit is contained in:
Jarrod Johnson 2016-11-30 11:42:50 -05:00
parent d2156f3d67
commit c016c55340

View File

@ -387,6 +387,7 @@ def resourcehandler_backend(env, start_response):
"""
mimetype, extension = _pick_mimetype(env)
headers = [('Content-Type', mimetype), ('Cache-Control', 'no-store'),
('Pragma', 'no-cache'),
('X-Content-Type-Options', 'nosniff'),
('Content-Security-Policy', "default-src 'self'"),
('X-XSS-Protection', '1'), ('X-Frame-Options', 'deny'),